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Abstract  The  classical  method  for  constructing  the  least  fixedpolnt  of  a recursive  definition 
is  to  generate  a sequence  of  functions  whose  initial  element  is  the  totally  undefined  function 
and  which  converges  to  the  desired  least  fixedpoint.  This  method,  due  to  Kleene,  cannot  be 
generalized  to  allow  the  construction  of  other  fixedpoints. 

In  this  paper  we  present  an  alternate  definition  of  convergence  and  a new  fixedpolnt  access 
method  of  generating  sequences  of  functions  for  a given  recursive  definition.  The  Initial 
function  of  the  sequence  can  be  an  arbitrary  function,  and  the  sequence  will  always  converge  to 
a fixedpoint  that  Is  "dose*  to  the  initial  function.  This  defines  a monotonic  mapping  from  the 
set  of  partial  functions  onto  the  set  of  all  fixedpoints  of  the  given  recursive  definition. 
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Manna  <■  Shamir 
Introduction 

A recursive  definition  of  the  form  F(x)  ■ f[FX*)  (where  F is  a function  variable  and  r is  a 
functional)  can  be  considered  as  an  implicit  functional  equation.  In  general,  such  a functional 
equation  may  have  many  possible  solutions  {fixedpoints ),  all  of  which  satisfy  the  relations 
dictated  by  the  recursive  definition.  Of  all  these  fixedpoints,  only  one,  the  least  fixed  point,  hats 
been  studied  thoroughly,  however,  recursive  definitions  have  other  interesting  solutions  (e.g., 
the  optimal  flxtdpolnt  discussed  in  Manna  and  Shamir  [1976]).  By  considering  the  properties  of 
the  entire  set  of  fixedpoints,  a unified  theory  for  the  various  fixedpoint  approaches  can  be 
developed. 

One  of  the  most  fundamental  results  in  the  theory  of  recursive  definitions  is  Kleene's  Theorem 
which  states  that  (under  suitable  conditions)  the  least  fixedpoint  is  the  least  upper  bound  (lub) 
of  the  sequence  0,  f [0],  f *[fl],  , where  the  initial  function  Q is  the  totally  undefined  function. 
This  theorem  gives  a constructive  method  by  which  the  least  fixedpoint  can  be  "accessed”  from 
the  initial  function  Q. 

1 The  purpose  of  this  paper  is  to  generalize  Kleene’x  Theorem  so  that  arbitrary  fixedpoints  of  a 

recursive  definition  can  be  accessed.  This  is  done  by  altering  Kleene’s  access  method  in  three 
ways:  by  allowing  an  arbitrary  initial  function,  by  generating  the  corresponding  sequence  of 
functions  in  a different  manner,  and  by  introducing  a modified  notion  of  convergence. 


Part  I contains  all  the  preliminary  definitions  and  results.  Our,  slightly  nonstandard,  model  of 
recursive  definitions  is  presented  in  Section  1.  In  Section  2 we  prove  some  properties  of 
functionals  in  this  model,  and  in  Section  3 we  study  the  elementary  closure  properties  of  three 
important  sets  of  functions:  fixedpoints,  prefixedpoints,  and  postflxedpoints. 

Our  generalization  of  Kleene’s  Theorem  is  discussed  in  Part  II.  In  Section  4,  we  consider  the 
behavior  of  Kleenc’s  "direct”  access  method  for  initial  functions  other  than  0 . In  particular, 
we  show  that  this  generalized  sequence  of  functions  may  fail  to  converge,  but  whenever  it 
converges  the  limit  is  a fixedpoint  which  is  "dose*  to  the  initial  function. 

More  general  types  of  access  methods  are  defined  in  Section  5.  In  essence,  each  such  method 
defines  a sequence  of  transformations  which  should  be  applied  to  the  initial  function.  These 
transformations  are  defined  in  terms  of  the  three  basic  operations:  functional  application,  gib, 
and  lub.  Among  the  access  methods,  we  pay  special  attention  to  the  "descending"  access  method. 
The  sequences  of  functions  generated  by  this  method  always  converge,  but  their  limit  need  not 
be  a fixedpoint. 


Finally,  In  Section  6,  we  show  that  under  the  composition  of  the  "descending"  and  "direct" 
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icccu  method!,  *ny  initial  function  converge*  to  a "close"  fixedpoim.  We  than  prove  that  no 
tingle  access  method  can  enjoy  this  property,  and  thus  the  composition  of  methods  is  essential. 
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Part  I:  Recursive  Definitions  and  Their 

Fixedpoints 

1.  Tha  Modal 

1.1  Tha  Basle  Domains 


The  purpose  of  this  subsection  is  to  introduce  the  basic  terminology  about  partially  ordered  sets 
used  throughout  this  paper. 

Dafinitloni  A binary  relation  e over  a nonempty  set  S is  a partial  ordering  of  S if 
s is  a reflexive,  transitive  and  antisymmetric  relation.  The  pair  (S,s) 
is  called  a partially  ordered  set  {pout). 

Dafinitloni  Let  (S,e)  be  a poset.  For  a subset  A of  S , an  element  x < S is  called: 


(a)  least  if  x « A and  for  all  y « A , x e y ; 


(b)  greatest  if  x c A and  for  all  y c A , y E x ; 

(c)  minimal  if  x c A and  there  is  no  y < A , y • x for  which  y ■ x ; 

(d)  maximal  if  x c A and  there  isnoycA,y*xfor  which  xsy; 

(e)  lower  bound  if  for  all  y < A , x e y ; 

(f)  upper  bound  if  for  all  y < A , y e x ; 

(g)  greatest  lower  bound  (gib)  if  x is  a lower  bound  of  A . and  for  any 
other  lower  bound  y of  A , y e x ; 


(h)  least  upper  bound  (tub)  if  x is  an  upper  bound  of  A , and  for  any  other 
upper  bound  y of  A , x e y . 

Dafinitloni  A semilattice  is  a poset  (S,e)  in  which  any  two  elements  in  S have  a 
gib.  A complete  semilattice  it  a poset  (S,s)  in  which  any  nonempty 
subset  of  S has  a gib. 

Such  structures  are  usually  called  ’lower  semilattice*  and  'complete  lower  semilattice*.  The 
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notion*  of  "upper  semi  lattice"  and  "complete  upper  temilattice"  are  limilarly  defined  with  the 
gib  replaced  by  lub  in  the  definition.  However,  we  omit  the  word  "lower"  lince  in  this  paper  we 
work  exclutively  with  lower  semilattices  and  no  confusion  i*  caused. 

Definition:  A subset  A of  S in  a semilattice  (S,e)  is  said  to  be  consistent  if  it  has 

an  lub.  An  element  x e.  S is  said  to  be  eonsisttnt  with  an  element  y e S 

if  the  set  {x,y}  is  consistent. 

Semilattices  may  contain  both  consistent  and  inconsistent  sets.  The  binary  relation  of  being 
"consistent  with"  is  clearly  reflexive  and  symmetric,  but  not  necessarily  transitive.  Note  that  if 
the  semilattice  is  complete,  the  existence  of  some  upper  bound  implies  the  existence  of  a lub. 
Any  subset  of  a consistent  set  is  also  consistent  in  this  ose,  but  pairwise  consistency  of  elements 
does  not  imply  the  consistency  of  the  set  as  a whole. 

Definitions  A sequence  x0,  x,,  x2,  ...  of  elements  in  a poset  S is  an  asctndlng 

(descending)  chain  if  xi  sxjt|(  xi+  j s X; ) for  all  i.  The  sequence  is  a 

chain  if  it  is  either  an  ascending  or  a descending  chain. 

Definition:  A flat  smilattict  is  a semilattice  in  which  all  chains  contain  at  most 
two  distinct  elements. 

It  is  clear  that  any  flat  semilattice  is  complete;  it  contains  a bottom  tltmtnt  u (which  satisfies  w s 
d for  all  d).  and  all  the  other  elements  are  unrelated.  The  importance  of  this  structure  in  the 
theory  of  computation  stems  from  the  fact  that  they  represent  the  two-state  discrete  type  of 
knowledge  which  often  occurs  during  a computation:  A variable  either  contains  a well- 
characterized  value  or  has  an  undefined  value  (if  used  without  proper  initialization);  an 
operation  (such  as  a division  of  two  numbers)  may  either  yield  a definite  result  or  terminate  as 
"illegal";  a procedure  call  may  either  return  a proper  result  or  loop  forever.  In  all  these  cases, 
one  possible  extreme  is  a totally  defined  entity,  while  absolutely  nothing  is  known  about  the 
other  (besides  its  very  "undefinedness"). 

All  tht  basic  domains  considtr td  in  this  paper  art  flat  semilattices,  denoted  by  D.  Two  domains 
of  special  importance  are  the  Boolean  domain  B - ({u,  true,  false),  e)  and  the  domain  of  natural 
numbers  N - ({«,  0,  1, 2, ... ),  e). 
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1 .2  Highar  Typa  Objects 

In  this  lection  we  inductively  define  the  objects  of  all  finite  types  over  the  basic  domain  D,. 

The  two  basic  notions  used,  that  of  a convergent  sequence  and  that  of  a continuity,  are  defined 
in  a nonstandard  way.  The  classical  definition  of  these  notions  is  heavily  oriented  towards  the 
needs  of  the  least  fixedpoint  approach;  we  need  more  balanced  definitions  in  order  to  construct 
a general  fixedpoint  theory  of  recursive  definitions.  In  particular,  we  no  longer  concentrate  on 
ascending  chains  and  their  lub,  but  consider  also  descending  chains  and  their  gib,  as  well  as 
more  general  forms  of  convergence. 

Definition:  A mapping  4 : A -*  B between  posets  is  monotonic  if  +(x)  e 4(y)  in  B 
whenever  x s y in  A. 

Definition:  The  set  of  (finite)  types  is  defined  inductively  as  fallows: 

(i)  Any  basic  domain  Dj  is  a type;  the  objects  of  this  type  are  the  elements 

of  Dj. 

(U)  If  ....  are  types,  so  is  x ...  x **;  the  objects  of  this  type  are 
the  vectors  (x,, x*)  where  each  xf  is  an  object  of  type 

C IU ) If  *|,  • 2 are  types,  so  is  [r,  * r2},  the  objects  of  this  type  are  the 
monotonic  mappings  from  objects  of  type  r,  to  objects  of  type  #2- 

There  is  a natural  way  to  extend  the  s relation  to  the  set  of  objects  of  any  finite  type,  using  the 
following  inductive  definition: 

Definition: 

(0  K 2 ■ (xj,  -.,  xk)  and  y a (y,,  ....  yk)  are  objects  of  type  x .„  x c*. 

then  S e y iff  for  all  1 i i s k,  x(  s yi  u objeett  of  type 

(U)  If  x and  y are  objects  of  type  [*|  -*  efX  then  x e y iff  for  any  fixed 
object  * of  type  x(z)  s y(x)  as  objecu  of  type 

It  is  easy  to  see  that  the  set  of  objects  of  any  finite  type  is  a complete  semilattice  under  this 
relation. 
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The  notions  of  a convergent  sequence  and  limit  are  usually  identified  with  those  of  an 
ascending  chain  and  lub,  respectively.  Our  definition  of  these  notions  is  more  inclusive 

Definition:  A sequence  of  objects  [xj]  of  some  finite  type  * is  said  to  convtrgt  to 

the  object  xm  of  type  written  as  x„  a fimty}.  if: 

«)  9 is  some  basic  domain  Df,  and  alt  the  elements  in  ty}  are  equal  to  xm 

from  some  index  j0  onwards. 


(it)  9 is  #,  x - x 9k  and  for  any  Is  i i k,  xj  m llm{xj]  (where  xjl  is  the 
i-th  component  of  xji. 

(iii)  9 is  [#,  -*  92)  and  for  any  fixed  object  z of  type  9 ,,  xm(z)  a llm[x^z)} 

(these  are  objects  of  type  e2,  for  which  the  notion  of  convergence  is 
already  defined). 


Parts  (ii)  and  (iii)  in  this  definition  are  standard,  and  once  we  define  our  notion  of  convergence 
in  the  basic  domains,  it  is  carried  over  to  all  finite  types.  It  is  easy  to  see  that  any  ascending  or 
descending  chain  of  any  type  is  a convergent  sequence  (with  lub  or  gib,  respectively,  as  limits). 
The  following  example  shows  that  the  converse  is  not  true: 

Example  It  Let  {/j}  be  a sequence  of  objects  of  type  [N  -*  N],  defined  by: 

l if xti 
f (x)  ■ { 0 if  x < i 
w if  x ■ u 

No  two  elements  in  the  sequence  {/;}  are  related  by  e , but  the  sequence  converges  to  the  object 
uro  of  type  [N  -♦  N) 


/ w if  x m u 

• I 0 otherwise 

This  follows  immediately  from  the  fact  that  for  any  argument  x of  type  N,  the  sequence 
of  elements  of  type  N is  convergent,  i.e.,  its  elements  are  0 for  all  sufficiently  high  l.  □ 

Using  the  notion  of  a convergent  sequence,  we  can  define  our  notion  of  continuity: 
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Definition: 

(i)  An  object  (X) xk)  of  type  x ...  x e*  it  continuous  If  all  the 

objects  Xj  are  continuous. 

(U)  An  object  x of  type  [*,  <r2]  is  continuous  if  for  any  convergent 

sequence  fy}  of  objects  of  type  9U  the  sequence  {x(zj))  of  objects  of 
type  *2  •*  convergent  and  x(lim{Zj})  a lim{x(zj)} . 

Since  the  notion  of  a convergent  sequence  is  more  inclusive  than  that  of  a chain,  our  notion  of 
continuous  objects  (i.e.,  of  limit-preserving  mappings)  is  potentially  more  restrictive  than  the 
standard  notion  of  chain-continuity.  The  following  example  shows  that  in  fact  an  object  can 
preserve  the  lub  and  gib  of  ascending  and  descending  chains,  and  still  be  noncontinuous  in  our 
system: 

Example  2t  Let  / be  an  object  of  type  [N  -»  N).  We  say  that  / is  clostd  if  the  sequence  {x^} 
defined  by 

x0  a 0 and  xi+I  a/fy)  ( i.e.,  xt  s/fyo) ) 

consists  of  a finite  number  of  distinct  elements,  none  of  which  is  w.  It  is  clear  that  a necessary 
and  sufficient  condition  for  a function  / to  be  closed  is  the  existence  of  numbers  0 i l < J such 

that  /l\0)  m //>( 0)  * w,  in  which  case  the  sequence  {x^}  is  periodic  from  some  point  onwards. 


Let  the  object  6 of  type  [[N  -*  N]  -»  B]  be  defined  as  follows: 


if  /contains  a finite  sequence  of  pointers 
otherwise 


The  object  8 preserves  the  lub  and  gib  of  ascending  and  descending  chains,  since  the  finite 
number  of  values  /ty)  which  constitute  a sequence  of  pointers  are  either  constructed  or 

destroyed  at  some  finite  point  in  any  chain  \fj),  and  thus  8[/im(/j}]  ■ 8^]  for  some  k. 

However,  8 is  not  continuous  in  our  model.  Consider,  for  example,  the  following  sequence  of 
objects  {/,}: 


/w-{ 


x+  1 
X 


if  X < l 
if  X a i 


- 
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The  sequence  converges  to  the  object 

/„(*) 

It  is  easy  to  see  that  ©(/’J  is  t . wnile  for  any  i,  0(/j]  is  trut.  Thus  a fim{0(/j]}  and 

6 is  not  continuous.  □ 

From  now  on,  we  shall  be  interested  mainly  in  the  lower  three  types  of  objects:  values  (objects 
of  type  Dj),  functions  (objects  of  type  [Di  x ...  x -♦  D0],  and  (single-argument)  functionals 

(objects  of  type  [[D1,  x ...  x D1*  -*  D'0  ] -♦  [D2,  x ...  x D2,  -*  D20  ]]).  Since  we  shall  not  deal 
with  systems  of  recursive  definitions,  we  do  not  have  to  consider  multi-argument  functionals 
(for  which  the  fixedpoint  theory  obtained  is  somewhat  different). 

1.3  Tarm  Functional*  and  Racurclva  Definition* 


Among  all  the  functionals  r,  we  shall  be  interested  mainly  in  term  functionals,  which  are 
syntactically  expressed  as  compositions  of  constants,  monotonic  base  functions  gj,  a function 

variable  F,  and  individual  variables  xj.  Associated  with  each  symbol  (including  the  variables) 
is  a type,  and  the  composition  of  these  types  must  be  legal. 

Exampla  3:  A term  of  the  form 

If  fix | . x,)  than  x2  alca  g(x2  , x3) 

can  be  legal  only  if  the  types  of  Xj,  x2,  and  x3  ire  the  boolean  semilattice  B,  and  the  type  of  g is 
[B  x B -*  Bl  This  can  be  shown  by  the  following  argument: 

Since  g<xt,X|)  appears  in  the  if  part,  the  range  of  this  term  must  be  B.  Since  the  two  subterms 
x2  and  g(x2,x3)  must  have  identical  ranges,  the  type  of  x2  is  necessarily  B.  Therefore  the  type 
of  g is  of  the  form  [B  x ? -*  B].  In  order  to  make  the  term  g(xj  , x,)  legal,  X)  must  be  of  type 
B,  implying  that  "?"  is  also  B.  We  can  thus  conclude  (from  the  term  g(x2,x3))  that  x3  is  also  of 
type  B.  □ 

A term  functional  is  denoted  by  t[F](x, xp,  where  x, x^  are  all  the  individual  variables 

occurring  in  it,  in  some  order.  It  can  be  interpreted  as  a functional  in  the  following  way: 
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Given  a function  / and  an  argument  vector  3 - (3( d^)  (of  the  appropriate  type*),  the  value 

of  r[/X3)  is  the  object  obtained  by  evaluating  the  variable-free  term  in  which  F is  interpreted 
as  / and  xt  is  interpreted  as  d ^ The  function  r[f\  to  which  /is  mapped  under  r is  the  function 

abstraction  Xx  The  fact  that  r maps  monotonic  functions  to  monotonic  functions  is 

immediate  from  the  fact  that  all  the  base  functions  in  r are  monotonic,  and  the  set  of 
monotonic  functions  is  closed  under  composition. 

Definition:  A recursive  definition  is  an  equation  of  the  form 
F(x)  ■ rtFXx). 

where  r is  a term  functional. 

In  order  to  make  this  equation  meaningful,  r must  map  functions  of  the  appropriate  type 
[Dj  x ...  x D*  . D0]  to  functions  of  the  same  type. 
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2 Properties  of  Term  Functionals 

The  fact  that  term  functionals  are  monotonic  mappings  which  preserve  the  lub  of  ascending 
chains  is  one  of  the  oldest  and  most  basic  results  in  the  recursive  definitions  theory.  In  a 
simple  form  it  appears  in  Kleene  [1952],  while  a detailed  proof  of  this  result  for  a model  of 
functionals  which  is  quite  similar  to  ours  appears  in  Cadiou  [19721  In  this  section  we  prove 
the  stronger  result  of  continuity  in  our  model,  and  discuss  the  behavior  of  term  functionals 
under  the  gib  and  lub  operations  over  arbitrary  sets  of  functions  (rather  than  over  chains). 


2.1  Th*  Continuity  of  Term  Functionals 


Under  the  classical  definition  of  continuity,  any  mapping  which  preserves  the  lub  of  ascending 
chains  is  necessarily  monotonic.  However,  a mapping  6 can  preserve  the  limits  of  convergent 
sequences  without  preserving  a lub  of  chains,  or  without  being  monotonic  at  all.  This  happens, 
for  example,  when  6 maps  an  ascending  chain  {x;}  into  a descending  chain  (6(xj)}  provided 
that 


©(/tmjxj})  s Q(lub{Xj})  * glb{Q(Xj)}  s lim{&(xi)}. 

The  property  of  continuity  is  thus  totally  independent  from  the  property  of  monotonicity  in  our 
model. 

We  now  prove  the  basic  result: 

Thoorom  It  Let  r be  a term  functional  and  {/;}  a convergent  sequence.  Then 
{r[/j] } is  a convergent  sequence  and 

e r[/m{/i}] . 

Proof:  The  proof  is  by  induction  on  the  structure  of  r,  using  the  fact  that  term  functionals 
contain  finitely  many  basic  constructs.  Note  that  the  monotonicity  of  these  constructs  is  not 
used  at  all. 

If  r is  a variable  xj  or  constant  c,  the  proof  is  trivial. 

If  r is  of  the  form  g(r, rn),  we  may  apply  the  induction  hypothesis  that  all  the  subterms  ri 

are  continuous.  Let  x be  fixed.  Then  for  any  1 £ k s,  n,  there  is  an  index  such  that 
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rk[fjm  a r*W»{/i}XJ)  for  all  j i jk  . 
Let  Jo  be  max(ju  ..*Jn).  Then  for  all)  tj0: 

rlfjXx)  • girtym rn[fjm) 

■ f<r|[fim{0x) rn[lim{fi}y,x)) 

b r[Un[fi)Xx). 


Finally,  if  r is  of  the  form  F(r, Tn),  we  define  j0  in  exactly  the  *ame  way  as  before.  We 

denote  the  vector  ( r ,[/im{/i)Xx) r ) by  y,  and  thus  by  the  definition  of  r, 

r[/im{^}Xx)  b (lim{fi})(y) . 

Since  {/^J  is  a convergent  sequence,  there  is  some/0  such  that 

f/y)  • (llm{f(}Xy)  fora\lji/0  . 

Let/t'  be  max(j o,fy.  Then  we  have,  for  all  j */0' : 

r[fjXx)  m fj(rl{fjm,-.,Tn[fjm) 

* f^riUim{fi}Xx),...,Tn[lim{fl}Xx)) 

" ff$>  ■ ■ r[/m{/j}X*). 

Q.E.D. 


Some  of  the  consequences  of  Theorem  1 are: 

Corollary:  Let  r be  a term  functional.  Then: 

(0  If  [fi } is  an  ascending  chain,  then  {r^]}  is  an  ascending  chain  and 
/u*{r(/i]}  a rUubifi)  1 


(U)  If  \fi)  is  a descending  chain,  then  (r^]}  is  a descending  chain  and 
a rl(mi 
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Proof: 


(i)  Any  ascending  chain  {/j}  is  a convergent  sequence,  and  lub{ft)  a iim{/j}.  Since  term 
functionals  are  monotonic,  {r(/^]}  is  also  an  ascending  chain  and  lub{r (/j]}  a By 

Theorem  1, 

/u6{r [/;]}  s limirlfj]}  s r[lim\f$\  s r[lvb\ffi  1 
(it)  The  proof  is  similar. 

Q,E.D. 


2.2  Bahavior  Under  the  gib  and  tub  Operations 


Lemma  1:  For  any  monotonic  functional  T: 

(i)  If  {/"*}  i*  a nonempty  set  of  functions,  then 

WJ) c fWJ}  ■ 

(ii)  If  {/"*}  is  a consistent  set  of  functions,  then  so  Is  {*{f^\),  and 

/uA{r(/J}  e r[lub{fjl 

Proof: 

(i)  Since  t is  monotonic  and  glb{f*}  s /*  for  all  «,  r[g/6{/w})  s r(/*]  for  all  o.  Thus 

rlglb{fu)]  is  a lower  bound  of  the  set  {f[/J},  and  therefore  e glb{ f^]J . 

(ii)  Since  \f«]  is  consistent,  its  lub  exists.  By  the  same  procedure  as  above,  r[/uA {/•*}]  can  be 
shown  to  be  an  upper  bound  of  {r[/J}.  In  our  model  this  implies  the  existence  of 

and  we  have  s r[/u*{/,4t)) . Q.E.D. 

According  to  corollary  (ii)  of  Theorem  1,  the  inequality  s glb{r[fu]}  becomes  an 

equality  if  r is  a term  functional  and  {/*}  is  a descending  chain.  This  result  can  be 
strengthened  by  showing  that  for  a wide  subclass  of  term  functionals  in  our  model,  the  words  "a 
descending  chain*  can  be  replaced  by  *a  consistent  set*.  Mappings  which  preserve  the  gib  of 
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A 


consistent  sets  of  arguments  are  defined  and  studied  in  Berry  [1976]  in  connection  with  the 
bottom-up  computations  of  least  fixedpoints. 

The  dual  property  of  preserving  the  lub  of  arbitrary  consistent  sets  of  functions  holds  only  for  a 
very  restricted  subclass  of  term  functionals  (mainly  those  in  which  the  term  r[FXx)  can  be 
simplified,  for  any  given  x0  , to  a term  with  a single  occurrence  of  F).  The  problem  in  more 
realistic  cases  is  demonstrated  by  the  following  example: 

Example  4:  Let  r be  the  following  functional  over  the  natural  numbers: 

t[FXx):  F(x+  1>.F(x  + 2> 

(where  0>UiU<0cu).  Define  the  functions 


if  x is  even 
otherwise 


if  x is  odd 
otherwise 


Then  f\  and  /2  are  consistent,  but 

t 

/u^T^lrfo]}  ■ lub{Sl, fl}  eft*  uro  a r[ztro]  a t[/u*{/>|/2}]  . 

□ 
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3.  Properties  of  Fixedpoints,  Prefixedpoints 
and  Postfixedpoints 

A recursive  definition  F(x)  e t[/Xx)  can  be  considered  as  an  implicit  functional  equation  in  F. 

With  each  such  recursive  definition,  we  associate  three  important  sets  of  functions:  fixedpoints, 

prefixedpoints,  and  postfixedpoints. 

3.1  Closure  Properties 

Definition: 

(1)  A partial  function  / is  a fixtdpoint  of  a functional  f , or  of  a recursive 
definition  F(x)  s r[FM  if  / b r[fl  The  set  of  all  fixedpoints  of  r is 
denoted  by  FXP(t). 

(ii)  A partial  function  / is  a pr (fixtdpoint  of  a functional  r , or  of  a 
recursive  definition  F(x)  s r [FXx)  , if  / s r[f]  . The  set  of  all 
prefixedpoints  of  r is  denoted  by  PRE(r) . 

(i iii ) A partial  function  / is  a postfixedpoint  of  a functional  f , or  of  a 
recursive  definition  F(x)  s f [F)(x)  , if  r[f]  s / . The  set  of  all 
postfixedpoints  of  r is  denoted  by  POST(r). 

Example  6:  Consider  the  following  recursive  definition,  in  which  F is  of  type  [N  x N -*  Nl 

?(x,y)  b If  x - 0 than  y else  F(F(x,y-l),F(x-lji)). 

The  following  three  (quite  different)  functions  are  all  fixedpoints  of  this  recursive  definition,  as 

can  be  shown  by  direct  substitution: 

(i)  /|(x,y)  b if  x - 0 then  y else  u ; 

( U ) fjUxy)  a if  x i 0 then  y else  u ; 

(Ul)  Mx.y)  m max(x.y). 

The  recursive  definition  has  infinitely  many  more  fixedpoints.  A whole  family  of  such 

fixedpoints  is 

(ii»)  fa(x,y)  a If  x - 0 than  y alsa  a(x) 
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where  «(x)  is  any  function  over  the  natural  numbers  satisfying 
a(x)  » 0 and  a(a(x))  - a(x)  for  all  x > 0. 

Examples  of  functions  satisfying  this  conditions  are  the  identity  function,  any  nontero  constant 
function,  or  the  function  which  assigns  to  any  n i 2 its  greatest  prime  factor  (with  «(l)  - 1 ). 

The  totally  undefined  function  fl  is  clearly  a prefixedpoint  of  any  recursive  definition;  in  our 
case  it  is  an  example  of  a prefixedpoint  which  is  not  a fixedpolnt. 

An  infinite  class  of  postfixedpoints  which  are  not  fixedpoints  of  this  recursive  definition  is 

IJ  ifOsxsi 
ft  ' ^ " i u otherwise 

for  all  i z 1.  □ 


By  definition,  it  is  clear  that  a partial  function  / is  a fixedpoint  of  a functional  r if  and  only 
if  it  is  both  a prefixedpoint  and  a postfixedpoint  of  r (that  is,  FXP(r)  • PRE(f)  n POST(f) ). 

In  this  section  we  summarize  the  closure  properties  of  the  sets  FXP(f),  PRE(t)  and  POST(r) 
under  the  operations  lub,  gib  and  Urn.  These  properties  belong  to  the  “folklore*  of  known  but 
seldom  stated  facts  about  recursive  definitions. 

Lemma  2:  For  any  monotonic  functional  r: 

«)  r maps  FXP(r),  PRE(r)  and  POST(r)  into  themselves. 

( ii ) PRE(r)  is  closed  under  the  lub  operation  over  consistent  sets. 

(Ul)  POST (r)  is  closed  under  the  gib  operation  over  nonempty  sets. 

Proof: 

(0  Immediate  from  the  monotonicity  of  r. 

( ii ) Let  {/*}  be  a consistent  subset  of  PRE(r)  . Then  for  each  a , fu  c . Since 
lub{fu]  exists,  fu  e luHfJ  , and  r is  monotonic,  we  have 

/*  B f [fj  E T[lub{fu})  . 


. 
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Thus  r[/ui{/^}]  is  an  upper  bound  of  {/*} , and  therefore 
W«>  b rUublfj: . 

In  other  words,  lub{fu)  is  also  a prefixedpoint. 

(iii)  Similar.  Q;E.D 

It  is  not  hard  to  show  by  appropriate  counterexamples  that  PRE(f)  need  not  be  closed  under 
gib,  POST(f)  need  not  be  closed  under  lub,  and  FXP(r)  need  not  be  closed  under  either 
operation. 

Let  us  turn  now  to  consider  yet  another  operation  — the  lim  of  convergent  sequences. 

Lemma  3:  For  any  term  functional  r , FXP(r),  PRE(r)  and  POST(r)  are  all 

closed  under  the  lim  operation. 

Proof: 

(i)  Let  {/^}  be  a convergent  sequence  of  fixedpoints  of  f.  By  Theorem  1 we  have. 

r[lim{fi)]  • a lim {/)} , 

and  thus  llm{f(}  is  also  a fixedpoint  of  r . 

( ii ) Let  [ffi  be  a convergent  sequence  of  prefixedpoints  of  r.  Then  for  any  i,  fi  e By 

the  definition  of  the  lim  operation  we  have 

llmtfi)  e «m{r^]} , 

By  Theorem  I,  llm^lffl]  exists  and  lim{r[fj]}  a r[lim{fi)  1 Thus 
limifil  e , 

or  equivalently  is  a prefixedpoint  of  r . 

(Ill)  Similar  to  (li).  Q,E.D, 

An  important  special  case  is: 


IS 
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Corollary:  For  a term  functional  r , FXP(r) , PRE(f)  and  POST(r)  are  all 

closed  under  the  lub  and  gib  of  ascending  and  descending  chains. 


S.2  Maximal  and  Minimal  Fixedpoint* 

We  turn  now  to  study  those  fixedpoints  located  at  the  extreme  ends  of  FXP(r)  --  the 
maximal  and  the  minimal  fixedpoints  of  t . 

As  usual,  a maximal  fixedpoint  of  r is  defined  to  be  a fixedpoint  which  is  not  less  defined 
than  any  other  fixedpoint  of  r . The  set  of  all  maximal  fixedpoints  is  denoted  by  MAX(r) . 

A basic  property  of  MAX(r)  is: 

Thaoram  2:  For  a monotonic  functional  r , 

if  / e PRE(r)  then  / s g for  some  g « MAX(r) . 

Proof:  This  is  quite  a straightforward  application  of  Zorn's  Lemma  which  states  that  if  (S,<) 
is  a nonempty  partially  ordered  set  in  which  any  totally  ordered  subset  has  an  upper  bound, 
then  S contains  a maximal  element  (see  e.g.  Dugundji  [1966]). 

For  our  purposes,  we  take  the  set 

S - { h c PRE(r)  | / c h } 

with  the  standard  partial  ordering  £ . This  set  is  not  empty  since  / € S . If  S,  is  a totally 
ordered  subset  of  S , it  is  in  particular  consistent,  and  thus  lubSt  exists.  By  Lemma  2 HO 
lubSl  is  a prefixedpoint  of  r , and  it  clearly  satisfies  / e lub$,  . Thus  lubS,  € S and 
therefore  the  subset  $|  has  an  upper  bound  in  S. 

We  may  now  apply  Zorn’s  Lemma,  which  guarantees  the  existence  of  a maximal  element  g c S . 
By  definition,  fsg  and  g e r[g] . To  show  that  g is  a fixedpoint  of  r , we  note  that  by 
Lemma  2 (<).  Is  *l*o  » prefixedpoint  of  r in  S , and  thus  the  assumption  that  g = r[g-] 
contradicts  the  maximally  of  g in  S . Q,,E  D. 

Since  for  any  functional  t,  PRE(v)  is  nonempty  (0  < PRE(f)) , we  have: 

Corollary:  For  any  monotonic  functional  f,  MAX(r)  is  not  empty. 

; 

This  corollary  guarantees  the  existence  of  at  least  one  maximal  fixedpoint,  but  it  need  not  be 
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unique.  At  a matter  of  fact,  monotonic  functionals  may  have  any  number  of  maximal 
fixedpoints  in  our  semilattice  model. 

Let  us  consider  now  the  minimal  fixedpoints  of  a monotonic  functional  r . The  main  result 
(the  Ltast  Flxtdpoint  Thtorm)  states  that  a monotonic  functional  r has  a least  (and  thus  a 
unique  minimal)  fixedpoint,  which  we  denote  by  lfxp{r).  This  is  a classical  theorem,  and  it 
has  two  well-known  types  of  proofs: 

(i)  (A  nonconstructive  proof,  due  to  Tarski  [1955]):  In  a model  in  which 
r is  defined  over  a complete  lattice  (rather  than  a complete  semilattice) 
of  elements,  one  can  take  the  gib  of  any  set  of  elements.  The  element 
gib  POST(r)  is  then  shown  to  be  a fixedpoint  of  f , and  it  is  clearly 
below  all  the  other  fixedpoints  of  r (which  are  all  contained  in 
POST(f) ). 

(is)  (A  constructive  proof,  due  to  Hitchcock  and  Park  [19721  Cadiou 
[1972]):  This  is  a rather  complicated  proof,  which  constructs  a 
transfinite  ascending  chain  of  approximations  r<x>[0] . This  chain  is 
shown  (by  transfinite  induction)  to  converge  to  the  least  fixedpoint  of 

r . 

The  first  approach  cannot  be  directly  applied  when  a model  of  complete  semilattices  is 
considered.  If  the  function  gib  POST(r)  exists,  it  is  the  least  fixedpoint  of  r in  this  case  as 
well.  However,  this  function  need  not  exist  if  POST(r)  is  empty,  since  the  gib  operation  is 
defined  only  over  the  nonempty  subsets  of  the  complete  semilattice.  We  thus  have  to  show  that 
POST(r)  is  not  empty  as  a first  stage  in  a Tarski-like  proof.  Fortunately,  the  existence 
theorem  of  maximal  fixedpoints  (Theorem  2)  implies  that  FXP(r)  (and  thus  also  POST(t)  ) 
is  not  empty.  We  thus  get  the  following  indirect  proof,  in  which  maximal  fixedpoints  are  used 
in  order  to  show  the  existence  of  a least  fixedpoint. 

Thoorom  3 (The  Ltasi  Fixedpoint  Theorem)-.  If  r is  a monotonic  functional  (over 
a complete  semilattice)  then  FXP(r)  contains  a least  element. 

Proof:  By  the  corollary  of  Theorem  2,  POST(r)  is  not  empty,  and  thus  / ■ gib  POST(r) 
exists.  By  Lemma  2(fif),  it  is  a postftxedpoint  of  r , and  thus  e /.  The  function  r(/]  is 
also  a postfixedpcint  of  r , and  thus  / ■ gib  POST(r)  s r[f]  as  well.  Consequently  / ■ r[f  ] 
and  therefore  / < FXP(r)  . It  is  the  least  fixedpoint  of  r since  / ■ gib  POST(r)  s gib 
FXP(r) . Q.E.D. 
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* Theorem  S can  be  used  in  order  to  find  the  relationship*  between  prefixedpoints, 

postfixedpoinu  and  fixedpoints  in  general.  The  relative  form  of  Theorem  3 is: 

Thaorem  4:  For  a monotonic  functional  (o4er  a complete  semilattice): 

<i)  If  / is  a prefixedpoint  of  r,  then  there  exists  a least  fixedpoint  in  the 
set  of  functions  Sy  ■ [g  \ f s g). 

(U)  If  / is  a postftxedpoint  of  r,  then  there  exists  a greatest  fixedpoint  in 
the  set  of  functions  sf  - {g  | g s /} . 

Proof: 

(i)  Since  / e PRE(r),  Theorem  2 guarantees  that  Sy  contains  at  least  one  fixedpoint.  The 
proof  of  Theorem  3 can  then  be  applied  without  change  (over  the  complete  semilattice  Sy). 


(ii)  Using  the  inverse  relation,  if  s A|.  it  can  be  shown  that  (S f , <)  is  a complete 

lattice.  Theorem  3 now  shows  that  S f contains  a least  fixedpoint  with  respect  to  <;  this 
fixedpoint  is  dearly  greatest  with  respect  to  e.  Q.E.D. 
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Part  II:  The  Convergence  of  Functions  to 
Fixedpoints 


In  Part  I we  defined  our  model  of  recursive  definitions  and  studied  its  basic  properties.  Using 
these  results,  we  now  analyze  the  methods  by  which  fixedpoints  of  recursive  definitions  can  be 
"accessed*  from  other  partial  functions.  In  essence,  each  "access  method"  uses  a given  initial 
function  f0  as  a starting  point,  and  constructs  a sequence  of  functions  which  converges  to  a 

fixedpoint  of  r . We  want  the  fixedpoint  obtained  to  be  "closest"  to  the  initial  function.  Since 
the  ordering  £ is  only  partial,  one  can  directly  compare  in  this  sense  only  fixedpoints  related 
by  e . The  most  natural  definition  of  this  notion  is  therefore: 

Definition:  A fixedpoint  g of  r is  said  to  be  close  to  a partial  function  /0  if 

for  every  fixedpoint  h of  r : 

(i)  if  h s f0  then  h £ g , and 

(ii)  if  /0  e h then  g s h . 

In  other  words,  the  fixedpoint  g is  close  to  f0  if  it  is  above  any  fixedpoint  below  /<>,  and 
below  any  fixedpoint  above  /0  . A priori,  it  is  not  clear  that  such  a close  fixedpoint  must  exist 
for  any  partial  function  /0  --  this  will  be  one  of  the  results  proved  in  this  part. 

All  the  functionals  considered  in  this  part  are  term  functionals. 
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4.  The  Direot  Aooess  Method 

Kleene's  version  of  the  Least  Fixedpoint  Theorem  for  continuous  functionals  shows  that  by 
repeated  application  of  the  functional  r to  the  initial  function  fl  , one  can  construct  a 
sequence  {r^[0]}  whose  limit  is  the  least  fixedpoint  of  r . This  method  (which  we  call  the 
dirtct  access  mtthod)  can  be  applied  to  an  arbitrary  initial  function  /0  , but  in  general  the 
sequence  obtained  need  not  converge  to  a limit.  The  following  example  demonstrates  such  a 
case 

Exampla  6:  Consider  the  recursive  definition  over  the  natural  numbers: 

F(x)  e if  xalO  thin  F(x-10)  tlst  F(x+1) 

The  collection  of  equalities  implied  by  this  recursive  definition  has  a cyclic  component: 

F(0)  s F(l)  e F(2)  s # . . s F(9)  e F(10)  e F(0) 
and  the  additional  equalities: 

F(1 1)  s F(  1),  F(12)  s F(2), 

It  is  clear  that  any  constant  function  is  a fixedpoint  of  the  recursive  definition  and  there  are  no 
other  fixedpoints;  the  least  fixedpoint  is  ft  . and  any  constant  total  function  is  a maximal 
fixedpoint. 

Consider  now  the  two  initial  functions: 

, - , fO  ifxsO  rO  ifOsxs  10, 

“ lu  otherwise  * “ U otherwise 

The  sequence  ]}  does  not  converge,  since  the  value  0 is  rotated  in  the  cycle  x-0,l,...,10 

under  the  repeated  application  of  f . On  the  other  hand,  the  sequence  converges  to 

the  fixedpoint  zero  of  r , since  all  the  nonzero  values  of  f2  are  eventually  replaced  by  0 . 
Note  that  this  sequence  is  neither  an  ascending  chain  nor  a descending  chain  (in  fact,  no  two 
distinct  elements  are  ever  consistent),  but  it  converges  according  to  the  generalized  notion  of  lim. 
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Definition:  The  function  /0  converges  to  g (under  a functional  r)  if  {f(^[/0]}  is  a 

convergent  sequence  and  g is  its  limit. 

We  now  state  and  prove  the  basic  result: 

Thaoram  5:  If  /0  converges  to  g under  r,  then  g is  a fixedpoint  which  is  close  to  f0  . 

Proof:  To  show  that  g is  a fixedpoint  of  r,  we  use  the  (generalized)  continuity  of  f: 

r[g]  e r[/fm{r%0]}]  £ /im(r[rW[/0]]}  a lim{r^^[f0]}  m g. 

To  show  that  g is  close  to/0,  consider  an  arbitrary  fixedpoint  A of  T: 

(i)  If  *s/0  then  by  the  monotonicity  of  f,  s T^Xfo)  for  all  i,  and  thus  since  A is  a 

fixedpoint 

A s /im{r^[A]}  e = g . 

(if)  If  /o  s A then  similarly: 

g s /im{fW[/0]}  e 5 A . Q.E.D. 

We  can  describe  the  result  of  Theorem  5 as  follows:  if  g)  and  g2  are  anY  two  fixedpoints  of 
r such  that  g\  e f0  e g2  , and  if  {tW[/0]}  converges,  then  it  converges  to  a fixedpoint  g 
which  is  also  in  the  “box"  g{  s g s g2  ■ Note  that,  unless  /o  c PRE(r)  u POST(r),  an  initial 
function  /0  need  not  be  related  by  e to  the  fixedpoint  g to  which  it  leads.  Furthermore, 
there  need  not  be  a greatest  element  among  the  fixedpoints  which  are  less  defined  than  /0  or  a 
least  element  among  the  fixedpoints  which  are  more  defined  than  /0  . 

Civen  an  arbitrary  initial  function  /0  . it  may  be  hard  to  determine  in  advance  whether  the 
sequence  converges  or  not.  One  important  case  in  which  the  convergence  is 

guaranteed  is  when  f0  is  either  a prefixedpoint  or  a postfixedpoint  of  r . In  these  cases  the 
generated  sequence  is  a chain,  and  thus  has  a lim. 

We  now  proceed  to  characterize  two  other  cases  in  which  the  sequence  must  converge. 

Lamm*  4:  /i  E/o  E/z  where  /i  and  /2  both  converge  to  the  fixedpoint  g 

of  r , then  f0  also  converges  to  g . 
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Proof:  By  the  monotonicity  of  r , s £ ^W[/2]  for  any  l . The  definition  of 

convergence  implies  that  for  each  x there  is  a natural  number  jo  suc^  that 

t(%,  X5)  s t%2](5)  = gGe)  for  all  j 2 j0  , 

and  therefore 

rii\f0](x)  = g(x)  for  all  j > j0  . 

In  other  words,  the  sequence  {t^[/0]}  converges  to  g . QjE.D. 

One  immediate  corollary  of  this  "sandwich"  property  is: 

Corollary:  If  /0  e lfxp(r) , then  /im{r^[/0]}  s lfxp(r ) . 

The  least  fixedpoint  of  r thus  has  the  interesting  property  that  any  initial  function  /0  e 
> Ifxp(r)  converges  to  it  under  the  repeated  application  of  r (but  not  necessarily  in  the  form  of 

an  ascending  chain).  Consequently,  in  order  to  access  other  fixedpoints  of  r , one  must  start 
with  initial  functions  which  are  already  sufficiently  defined. 

A slightly  different  type  of  result  is: 

Lamma  5:  If  /,  s /2  and  g s is  a total  fixedpoint  of  r , then  /2 

also  converges  to  g . 

Proof:  By  the  monotonicity  of  T , e rW[/2]  for  all  i . Since  the  sequence  {t^/,]} 

converges  to  g , for  any  x there  is  a j0  such  that: 

rO)[/,Xx)  * g<x)  for  all;  2 jo  , 

or.  in  other  words: 

g<5)  s t(/)[/2Xx)  for  all  j 2 j0  . 

Since  g is  a total  function,  we  obtain: 

g{x)  s r(/)[/2Xx)  for  all  j 2 j0  , 

and  thus  a £ . Q,E  D. 
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Note  that  the  requirement  that  g is  total  is  essential;  it  may  well  happen  that  a function  /, 
converges  to  a nontotal  maximal  fixedpoint  g , while  a function  /2  , which  is  more  defined 
than  /,  , does  not  converge  at  all. 

Taking  b Q , we  obtain  an  important  special  case  of  Lemma  5: 


Corollary:  If  lfxp(r)  is  a total  function,  then  any  initial  function  /0  converges  to 

lfxp(r) . 

If  a recursive  definition  has  only  one  fixedpoint,  then  it  is  clear  that  the  lim  of  any  convergent 
sequence  is  lfxp{r)  . However,  if  the  unique  fixedpoint  lfxp(r)  is  not  total,  there 

may  be  initial  functions  /0  for  which  the  sequence  does  not  converge  at  all. 
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5.  General  Acoess  Methods 

In  the  previous  section  we  have  considered  one  of  the  simplest  ways  by  which  we  can  access  the 
fixed  points  of  r — the  repeated  application  of  r to  an  initial  function  /a  This  method  may 
fail  to  converge  when  applied  to  certain  initial  functions  /0.  In  this  section  we  investigate  some 
more  general  access  methods,  which  are  later  used  in  order  to  access  fixedpoints  of  r from 
arbitrary  initial  functions. 


6.1  Access  Methods 

In  order  to  formally  introduce  the  genera!  notion  of  an  access  method,  we  first  define: 
Definition:  The  set  of  formulae  is  defined  inductively  as  follows: 

«)  The  symbol  F is  a formula  (F  is  said  to  be  a function  variable). 

(it)  If  ft  is  a formula,  then  T [5]  is  a formula  (T  is  said  to  be  a functional 
variable). 

(Hi)  If  8f|,  tj2  are  formulae,  then  £/i{3'i$2}  anc*  ate  formulae. 

Given  a formula  15  and  a functional  r,  we  denote  by  <JT  the  formula  in  which  the  functional 
variable  T is  interpreted  as  r.  JF  can  be  considered  as  a functional  (over  the  same  domain  of 
functions  as  r)  in  the  following  way:  Civen  any  function  /,  UT[/]  is  the  function  obtained  by 
evaluating  the  formula  3r  in  which  T is  interpreted  as  r and  F is  interpreted  as  /.  Unlike  the 
functionals  considered  so  far,  S5T  may  fail  when  applied  to  certain  functions  /,  in  case  the  lub  of 

inconsistent  functions  is  to  be  taken  during  the  evaluation  process;  in  this  case,  $sT[f\  is  not 
defined 

Example  7:  Consider  the  formula: 

glb{T  [lub{T,T  [F]}],FJ , 
and  the  functional 

r[FXx):  F(x+ 1) 
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over  the  natural  numbers. 

The  functional  fails  for  the  identity  function  f{x)  a x,  since  / and  r[f\  are  inconsistent,  and 
thus  their  lub  is  not  defined.  However,  5JT  does  not  fail  for  the  function: 

- . f 0 if  xsO  ( mod  3) 

/M  s 

i w otherwise 


and  the  function  0rr[/]  is  ft.  □ 

Given  a functional  r and  initial  function  /,  we  may  consider  a function  as  a modification 
of  /.  A sequence  of  formulae  {Jfy  can  thus  be  used  in  order  to  construct  a sequence  of 

successively  modified  functions  iftjt/l}.  If  the  sequence  is  properly  chosen,  this  sequence 
of  functions  may  converge  to  a fixedpoint  of  r.  We  thus  define: 

Oafinitloa  An  acctss  method  31  is  a sequence  of  formulae  {8?A  For  a given 
functional  f , a partial  function  / is  said  to  converge  to  g under  ffl  if  all 
the  functions  exist,  and  * g ■ If  some  of  the  functions 

Jt/3  do  not  exist,  the  method  is  said  to  fail  for  f and  /. 

In  the  case  the  formulae  become  successively  more  complicated,  it  is  convenient  to  use  a 
slightly  modified  notation  for  formulae.  We  use  a sequence  of  function  variables  Fq,  Fi 

where  each  Fj  represents  the  function  5JI/1,  given  r and  /.  Each  function  variable  Fj  is 
defined  by  a formula  in  which  all  the  function  variables  F0,  F)( F^_j,  in  addition  to  F,  may 

appear.  This  representation  is  equivalent  to  the  original  one,  since  one  can  always  expand  the 
formulae  in  the  new  representation  to  formulae  in  which  only  the  function  variable  F may 
appear. 

Some  of  the  simplest  access  methods,  in  the  new  representation,  are: 
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(A)  F0  a F 
FjbTCF,.,]  fori  2 1. 

(B)  F0  a F 

Fj  ■ ftt{Fj_i,TW[F]}  fori  si. 

(C)  F0  * F 

Fi  s glb{?i_\,T  [F/.j]}  for  i i 1. 

(D)  F0  a F 

F/  a glb{T,T  [F,-_  i ]}  fori  Si. 

<E)  F0  a F 

Fi.T[f/6{F,Fi_i)l  fori  sl. 

Note  that  methods  C-E  represent  all  the  nontrivial  ways  by  which  Ff  can  be  defined  in  terms 
of  | and  F,  using  one  occurrence  of  T and  one  occurrence  of  gib.  Four  other  simple  access 
methods  (denoted  by  B'-E')  can  be  obtained  from  methods  B-E  by  replacing  each  gib  by  lub. 

Method  A is  the  direct  access  method  discussed  in  Section  4,  since  the  expanded  form  of  any  F i 
is  T W(F1  Method  B is  closely  related  to  this  method,  since  each  is  simply  the  gib  of  a finite 
number  of  powers: 

Fj  a glb{¥,T  [F],T  <Z)[F],-  • • ,T  ^[F]} . 

For  any  functional  r and  initial  function  /,  the  sequence  of  functions  [ft]  generated  by  method 
B is  a descending  chain,  since  the  gib  in  the  formula  for  F^+j  contains  one  more  term  than  the 
gib  in  the  formula  for  Fj.  The  convergence  of  any  initial  function  / is  thus  guaranteed,  but 

unlike  the  case  of  the  direct  access  method,  the  limit  function  need  not  be  a fixedpoint  of  r. 
This  is  demonstrated  in  the  following  example 

Example  8.  Let  r be  the  following  functional  over  the  natural  numbers: 
r[FXx) : if*  - 0 thtn  F(x)+1  else  O-F(x-l). 
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*>-C 

For  any  i 2 0, 


0 ifxiO.l 
otherwise . 


i if  xmO 

r^(/Xx)«|o  if  lsxst+l 

u otherwise , 

and  thus  the  gib  of  all  these  functions  is; 

ro 


glb[T«Xf)}M  a {° 


if  xel 
otherwise 


This  function  is  not  a fixedpoint  of  r (as  a matter  of  fact,  it  is  not  even  a prefixedpoint  or  a 
postfixedpoint  of  r).  □ 


5.2  Tha  Descending  Access  Method 

Among  the  access  methods  listed  above,  we  shall  be  interested  mainly  in  method  C,  called  the 
descending  access  method,  and  in  method  C',  called  the  ascending  access  method.  In  this  section 
we  study  the  behavior  of  the  first  method. 


For  any  initial  function  /,  the  descending  access  method  construes  a descending  chain  of 
functions  {ffl,  since  each  ft  is  the  gib  of  ft.\  with  some  other  function.  The  idea  behind  the 

method  is  to  ’smooth  up*  the  initial  function  / by  repeatedly  taking  the  common  part  ft  of  the 

functions  ft_i  and  hopefully  such  a process  may  result  in  a function  whose  values  are 

preserved  under  the  application  of  r,  i.e.  a fixedpoint  of  r. 

If  the  initial  function  / is  a prefixedpoint  or  a postfixedpoint  of  r,  then  the  sequence  \fi) 
generated  by  method  C has  an  especially  simple  form: 

Lefflina  6:  Let  be  the  sequence  generated  by  the  descending  access  method  C 

for  r and  /.  Then: 

(i)  If  / « PRE(r)  then  for  all  i,  ft  ■/. 
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(ii)  If  / € POST(t)  then  for  all  i,  / s r^Xfl 

Proof: 

(i)  The  proof  is  by  induction  on  i.  For  i - 0,/o  s/by  definition.  Suppose  that  for  some  l,ft 
s ft  Then. 

/f.i  * E ■/. 

since  / e r[/l 

(ii)  This  part  is  again  proved  by  induction.  For  i - 0,/o  s/by  definition.  If  for  some  l,  ft  s 
r^X/1.  then  ft  is  also  a postfixedpoint  of  r by  Lemma  2(0.  and  thus: 

fu  1 s gWi-'W)  5 rW  s s r<»'+  % QjE.D. 

Part  (i)  of  Lemma  6 shows  that  an  initial  function  / may  converge  under  method  C to  a limit 
function  which  ii  not  a fixedpoim  of  r.  However,  we  have: 

Thaoram  6:  For  any  functional  r and  initial  function  /,  the  sequence  {/;}  generated 

by  the  descending  access  method  C converges  to  a prefixedpoint  of  r. 

This  limit  function  is  the  greatest  among  the  prefixedpoints  of  r that 
are  below  /. 

Proof:  The  fact  that  the  descending  chain  ft}  converges  to  some  limit  function  g,  which  is 
below  ft  is  clear.  We  now  show  that  g is  a prefixedpoint  of  r , i.e.  g e r[j] . Bv  definition 

g * limft]  s liMglbft_vTft_i\}\ . 

Since  both  and  {r^_ j ]}  are  convergent  sequences 

and  by  the  continuity  of  r and  the  definition  of  g 

g m glb{limft_i),T[limft.i}]}  s . 

The  fact  that  g e r[/]  follows  now  from  the  equality  g a *[{]}. 
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Finally,  we  show  that  if  A it  any  prefixedpoint  of  r tuch  that  As/,  then  A s g.  It  suffices  to 
show  that  *s/(  for  all  i.  We  prove  this  by  induction  on  l. 

If  i - 0,  then  /o  ■ / and  thus  A s /0  by  assumption.  If  /j  satisfies  A E/j  for  some  i,  then: 

A e r[A]  e r I/f] , 

and  thus  A is  below  both  fi  and  f [/,•],  implying  that 

* = im*W)  • 


Q;ED. 

The  existence  of  a greatest  prefixedpoint  below  an  arbitrary  partial  function  / can  be 
independently  proved  by  taking  the  lub  of  the  consistent  set  of  all  the  prefixedpoints  of  r below 
/.  and  using  the  fact  that  this  lub  is  itself  a prefixedpoint  of  r.  Theorem  6 shows  that  the 
descending  access  method  always  leads  to  this  greatest  prefixedpoint.  Note  that  the  set  of 
fixtdpointi  below  / need  not  have  a greatest  element  (in  fact,  it  may  even  be  empty  if  / «= 
lfxp{r) ). 

We  can  now  show  that  the  descending  access  method  is  the  least  access  method  in  the  following 
sense: 

Theorem  7:  For  any  functional  r,  if  an  initial  function  / converges  to  g}  under  the 
descending  access  method  C and  to  under  some  other  access  method 

W,  then  /,  e f2 


Proof:  We  first  prove  that  for  any  formula  for  which  exists,  j|  e The  proof  is 

by  induction  on  the  structure  of  the  formula  3. 

(0  If  8f  is  F,  then  clearly  g,  s / * J5r(/3. 

(ii)  If  is  of  the  form  then  by  the  induction  hypothesis  gt  e Since  by 

Theorem  6,  g,  is  a prefixedpoint  of  r,  we  have: 


g,  s rCg,]  s f ■ V[f]. 


u 


I 

r 


32 


Manna  & Shamir 

(»<)  If  / c POST(t)  then  for  all  i.f^  a /. 

Thaoram  6:  For  any  functional  r and  initial  function  /,  if  the  functions 

generated  by  the  ascending  access  method  C'  exist,  then  the  sequence 
\fl)  converges  to  a postfixedpoint  of  r.  This  limit  function  is  the  least 
among  the  postfixedpoints  of  r that  are  above /. 

Thaoram  9:  For  any  functional  r,  if  an  initial  function  /converges  to  g(  under  the 
ascending  access  method  C'  and  to  g2  under  some  other  access  method 
51.  then  g2  s g,. 

The  following  Lemma  gives  a sufficient  condition  on  r and  / which  guarantees  the  existence  of 

9T[/]  for  an  arbitrary  formula  9. 

Lemma  8:  For  a given  r and  /,  if  there  is  a postfixedpoint  g of  r which  satisfies 

/ E g,  then  for  any  formula  5,  the  function  9r(/1  exists. 

Proof:  We  jhow  (by  induction  on  the  structure  of  9)  that  9r(/1  exists  and  satisfies  9Tty1  s g 

for  any  formula  9: 

(i)  If  5 is  of  the  form  F.  then  9r[/]  - f s g by  assumption. 

(if)  If  9 is  of  the  form  T[9|X  then  by  the  induction  hypothesis  9ft/3  exists  and  satisfies 

9ft/J  s g,  and  thus: 

9 r[f]  a r[9fl/3J  e r[g]  e g. 

(iU)  If  9 is  of  the  form  g/6{9|,92},  where  9f(/l  s g and  9J[/1  E g,  then  clearly: 

9T(/1  a gtt{9tyl9|(/]}  E g/6{g,  g}  a g. 

(iw)  Similarly,  if  9 is  of  the  form  /u6{9|.9j},  where  9f(/l  e g and  9Jty]  e g,  then  these  two 

functions  are  consistent,  and  thus  their  lub  exists  and  satisfies: 

9rtf  a /u*{9ft/l  9ft/]}  E lub{g,  g}  a g.  Q,E.D. 
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Corollary:  For  a given  t and  /,  if  there  is  a postfixedpoint  g of  T which  satisfies 

ftg,  then  no  access  method  21  can  fail  for  r and  /. 

Note  that  this  corollary  does  not  imply  that  such  an  / converges  to  a limit  under  ffl. 

The  sufficient  condition  in  this  corollary  is  clearly  not  necessary  in  general.  Consider,  for 
example,  the  following  access  method: 

F0  »*/6{F.T[F]} 

F,  a g/6{T[F],f  *[F]} 

F,  a Tf/uiJFf.j.TCF,^]}]  for  i i 2. 

For  any  functional  r and  initial  function  /,  all  the  pairs  of  functions  /j_ j,  *{fi„ 2^ t0  w^*c^ 
tub  is  applied  are  consistent,  and  thus  this  access  method  can  never  fail. 

We  now  show  that  for  the  special  case  of  the  ascending  access  method,  the  condition  in  Lemma 
8 exactly  characterizes  the  cases  in  which  the  method  does  not  fail. 

Lemma  9:  A necessary  and  sufficient  condition  for  a function  /to  converge  under 

the  ascending  access  method  C'  is  the  existence  of  a postfixedpoint  g 
of  r such  that  / c g. 

Proof:  If  the  postfixedpoint  g exists,  then  by  the  corollary  of  Lemma  8 the  sequence  is 
defined.  Since  it  is  an  ascending  chain,  it  is  a convergent  sequence  and  thus / converges  under 
method  C'. 

On  the  other  hand,  if  /converges  under  C'  then,  by  Theorem  8,  the  limit  g of  the  generated 
sequence  \ft}  is  a postfixedpoint  of  r.  Furthermore,  / e g,  since  is  an  ascending  chain 

whose  first  element  is  /.  We  have  thus  shown  the  existence  of  a postfixedpoint  g of  T which 
satisfies  / eg. 

QjED. 

By  the  corollary  of  Lemma  8 and  by  Lemma  9.  the  ascending  access  method  C'  is  the  most 
exacting  in  the  sense  that: 

Corollary:  If  method  C'  does  not  fail  for  a given  r and  /,  then  no  other  access 

method  21  can  fail  for  r and  / 
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6.  The  Fixedpoint  Method 

In  this  section  we  finally  devise  a method  which  always  succeeds  and  under  which  any  initial 
function  converges  to  a fixedpoint.  As  we  show  in  subsection  6.2,  no  single  access  method  can 
achieve  this  goal;  we  thus  need  a somewhat  more  complicated  method,  based  on  compositions  of 
access  methods.  This  notion  is  formally  defined  as  follow.. 

Definition:  For  a functional  r,  an  initial  function  / is  said  to  converge  to  h 

under  the  composition  21 2 o 51,  of  two  access  methods  01  ( and  21 2 , if 
/ converges  to  some  function  g under  01 , and  g converges  to  h 
under  21 2 . 

This  definition  can  be  naturally  extended  to  an  n-fold  composition  5Ino. . .o5f2o5I,  . 


6.1  Properties  of  the  Fixedpoint  Method 

Definition:  The  fixedpoint  method  is  the  composition  A o C of  the  two  access 

methods  C and  A . 

The  mam  result  concerning  the  fixedpoint  method  is: 

Theorem  10:  For  a functional  r , any  initial  function  / converges  under  the 
fixedpoint  method  A o C to  a fixedpoint  of  r which  is  close  to  / . 
Furthermore,  this  fixedpoint  is  the  least  among  all  the  fixedpoints  of 
r which  can  be  reached  from  / under  any  composition  of  access 
methods. 

Proof:  Any  initial  function  / converges  under  A o C to  a fixedpoint  h of  r , since  / 

converges  under  C to  a prefixedpoint  g of  r (by  Theorem  6),  and  g converges  under  A 

to  a fixedpoint  h of  r (by  Theorem  5). 

We  now  show  that  h is  close  to  the  initial  function  / . Let  l be  an  arbitrary  fixedpoint  of 

r.  Then: 

0)  If  / s / , the  prefixedpoint  l is  below  / , and  by  Theorem  6,  the  prefixedpoint  g to 

which  / converges  under  C satisfies  l e g.  Consequently, 

l • /<m{rW[/]}  e « h 


36 


Manna  & Shamir 


and  thus  / e A . 

(ii)  If  /c  / , then  clearly  g s / , since  g s / . This  implies  that: 

A a flmjfftfy]}  s /im{fW[/]}  a / . 

and  thus  Ac/. 

Finally,  we  show  that  A is  the  least  among  all  the  fixedpoints  of  r which  can  be  reached 
from  / under  any  .otnposition  of  access  methods. 

Suppose  that  / converges  to  a fixedpoint  / of  r under  the  composition  2In  o 21  n_,  o . . . o 

21,  of  access  methods.  Let  us  denote  by  gi  (t-1 n)  the  successive  limit  functions  to  which  / 

converges  under  the  partial  compositions  21^  o ...  o 21,  (in  particular,  gn  a l ).  The  function 
/ converges  to  the  prefixedpoint  g under  C.  We  now  show  that  g c g,-  for  all  /-I n. 

Since  / converges  to  g and  g,  under  the  respective  methods  C and  21,  , we  have  (by 
Theorem  7)  that  g c g,  . The  function  g,  converges  to  g2  under  2I2  , and  to  some 
prefixedpoint  g2'  under  C (this  convergence  is  assured  since  any  initial  function  converges 
under  C ).  By  Theorem  6,  g{  is  the  greatest  among  the  prefixedpoints  of  r which  are 
below  g | . However,  g is  one  such  prefixedpoint  and  thus  g e g{  . On  the  other  hand,  g2'  e 
g2  by  Theorem  7;  we  thus  conclude  that  g s g2 . 

Continuing  this  type  of  reasoning  for  i>3,...,n  , we  can  show  that  g e g^  for  all  l . In 
particular,  gn  is  the  fixedpoint  / of  r , and  thus  g c / . 

We  still  have  to  show  the  relation  A s / between  the  fixedpoints  A and  / obtained  under  the 
compositions  A o C and  2f„ , o . . . o 21 , , respectively.  We  already  know  that  g e / , and  that 
the  prefixedpoint  g converges  to  A under  the  direct  access  method  A . By  Theorem  5,  the 
fixedpoint  A is  close  to  g , and  in  particular  AeA  for  any  fixedpoint  k of  r satisfying  g 
s k . Since  l is  one  such  fixedpoint,  we  obtain  the  desired  result  Ac/. 

Q.E.D. 

An  initial  function  / which  converges  under  the  ascending  access  method  C',  converges  to  a 
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pistfixedpoint  g of  r (by  Theorem  S).  The  function  g is  assured  to  converge  to  a 
fixedpoint  h of  f under  the  direct  access  method  A , and  thus  any  / converges  under  A o 
C'  to  a fixedpoint  of  r , provided  only  that  method  C'  does  not  fail  for  / . By  Lemma  8, 
this  condition  is  equivalent  to  the  existence  of  a postfixedpoint  of  r above  /.  The  dual  to 
Theorem  10  is  therefore: 

Thaoram  11:  For  any  functional  r and  initial  function  / such  that  there  exists  a 
postfixedpoint  of  r above  /,  the  function  / converges  under  A o 
C to  a fixedpoint  of  r which  is  close  to  / . Furthermore,  this 
fixedpoint  is  the  greatest  among  all  the  fixedpoints  of  r which  can 
be  reached  from  / under  any  composition  of  access  methods. 

The  proof  of  Theorem  11  is  analogous  to  the  proof  of  Theorem  10;  the  additional  assumption 
about  the  existence  of  a postfixedpoint  is  used  only  in  order  to  establish  the  existence  of  the 
appropriate  limits. 

Two  other  compositions  of  access  methods  which  are  equivalent  to  A o C and  A o C'  are 
characterized  in  the  following  lemma: 

Limmi  10: 

(i)  For  any  t and  /,/  converges  to  the  same  function  under  A o C and 
C'oC. 

(ii)  For  any  r and  /,  / converges  to  the  same  function  under  A oC' 
and  C o C',  provided  that  C'  does  not  fail. 

Proof 

(0  The  function  g to  which  / converges  under  C is  a prefixedpoint  of  f.  By  Lemma 
7(<),  methods  A and  C'  behave  in  the  same  way  for  prefixedpoints,  and  thus  the 
compositions  A o C and  C'oC  are  equivalent. 

(U)  Similar,  by  Lemma  7 (li).  Q.E.D. 

An  arbitrary  initial  function  / can  be  consi  lered  as  a "distorted  fixedpoint"  to  which  two 
types  of  corrections  must  be  applied: 

(0  Defined  parts,  which  are  either  changed  or  replaced  by  u under  the 
application  of  f,  must  be  deleted  from  the  function  since  they  do  not 
represent  possible  fixedpoint  values. 
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(it)  Undefined  parts,  which  are  replaced  by  defined  values  under  the 
application  of  r,  must  be  completed  with  the  appropriate  fixedpoint 
values. 

The  descending  access  method  performs  only  the  first  type  of  correction,  while  the  ascending 
access  method  performs  only  the  second  type  of  correction.  None  of  them  can  transform  an 
arbitrary  initial  function  / to  a fixedpoint  of  r , but  when  both  of  them  are  applied  to  / , a 
fixedpoint  of  r is  obtained.  The  order  in  which  the  two  correcting  stages  are  performed  (i.e., 
C'oC  or  C o C'  ) may  affect  the  fixedpoint  obtained,  since  the  two  access  methods  C and 
C'  do  not  commute  in  general.  Furthermore,  the  composition  C o C'  in  which  the  deletion 
stage  comes  after  the  completion  stage  may  fail,  while  the  fixedpoint  method  C'oC  cannot. 

Let  us  denote  by  Sf  the  set  of  fixedpoints  of  r which  can  be  reached  from  / by 
compositions  of  access  methods.  The  following  immediate  corollaries  summarize  the  structure 

of  Sf" in  the  case  where  method  C'  does  not  fail  for  r and  /. 

Corollaries: 

(i)  The  set  Sj  contains  a least  element  (accessed  by  C'  o C ) and  a 
greatest  element  (accessed  by  C o C'  ). 

(ii)  If  / converges  to  the  same  function  h under  C'oC  and  C o C'  , 
then  h is  the  only  fixedpoint  of  r which  can  be  reached  from  / 

(by  any  composition  of  access  methods). 

(fit)  If  / is  either  a preftxedpoint  or  a postfixedpoint  of  f , which 
converges  to  h under  the  direct  access  method  A , then  h is  the 
only  fixedpoint  of  r which  can  be  reached  from  / (by  any 
composition  of  access  methods). 

(ii»)  If  / is  a fixedpoint  of  r , then  / converges  to  itself  under  any 
composition  of  access  methods. 

(v)  All  the  fixedpoints  in  $}  are  close  to  / (however  there  may  be 
other  fixedpoints  which  are  close  to  / but  which  are  inaccessible  from 
/ by  any  composition  of  access  methods). 

(t n)  All  the  fixedpoints  in  Sj  are  consistent  with  the  initial  function  /. 
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If  access  method  C'  fails  for  .r  and  / , then  the  set  S[  need  not  have  a greatest  element, 

and  the  functions  in  Sj  need  not  be  consistent  with  / . However,  if  / is  either  a 
prefixedpoint  or  a postfixedpoint  of  r , then  C'  cannot  fail  for  r and  /. 

Theorem  10  guarantees  that  for  any  initial  function  /,  there  is  at  least  one  fixedpoint  h of  r 
which  is  close  to  / . For  a fixed  functional  r , we  can  consider  the  fixedpoint  method  A o C 
as  a functional  9Jlr  which  maps  any  function  / to  some  fixedpoint  of  r that  is  close  to  / . 
The  functional  2Rr  maps  the  set  PF  of  partial  functions  (over  the  appropriate  domain)  onto 
the  set  FXP(t)  , since  any  fixedpoint  h of  r is  mapped  to  itself  under  8Wr  . Our  aim  in 
the  rest  of  this  subsection  is  to  study  the  monotonicity  and  continuity  properties  of  2Wr  . 

Theorem  12:  For  any  functional  r , 2)lr  : PF->FXP(r)  is  monotonic. 

Proof:  By  induction  on  the  structure  of  formulae  it  is  easy  to  show  that  for  a fixed  functional 
r , any  access  method  is  a monotonic  mapping  from  initial  functions  to  limit  functions 
(whenever  they  exist).  Consequently,  the  composition  A o C (for  which  limits  always  exist)  is 
also  monotonic. 

Q.E.D. 

Note  that  the  existence  of  such  a monotonic  mapping  from  PF  onto  FXP(r)  is  not  surprising 
(due  to  the  many  structural  similarities  between  the  two  sets);  however,  the  theory  of  access 
methods  enables  us  to  define  the  mapping  in  a simple  and  constructive  way. 

The  functional  S0)T  whose  monotonicity  was  shown  above,  is  not  continuous.  This  fact  does 
not  stem  from  the  special  way  in  which  2>1T  is  defined.  The  following  theorem  shows  that  for 
certain  functionals  r , any  such  mapping  is  inherently  noncontinuous. 

Thoorom  13:  There  are  functionals  r , for  which  any  mapping  0:  PF-*FXP(r)  , 
which  assigns  to  each  partial  function  / a fixedpoint  of  r that  is 
close  to /,  must  be  noncontinuous. 

Proof:  Let  r be  the  following  functional  over  the  integers: 
r[FXx):  if  F(x-l)  - 0 then  F(x)  + 0-F(x+l)  + 0-x 
else  F(x-l)  + 0>F(x+l)  + 0*x  . 

The  special  property  of  this  functional  is  that  for  a certain  sequence  {/)}  of  initial  functions, 
each  has  exactly  one  fixedpoint  --  0 — which  is  close  to  it.  By  the  assumption  on  0 , 
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8[/,]  a ft  for  all  i , and  thus  /im{8[/;]}  eft.  We  shall  use  this  fact  in  order  to  show  that  6 
does  not  preserve  the  lim  of  convergent  sequences. 

The  two  subterms  0*x  in  the  functional  guarantee  that  any  fixedpoint  of  r is  undefined  for  x a 
u For  other  values  of  x , r[F](x)  is  defined  in  terms  of  both  F(x-l)  and  F(x+1)  , and  thus 
any  fixedpoint  of  r is  either  ft  or  total  over  the  defined  integers.  Among  the  total  functions, 
only  two  types  of  functions  are  fixedpoints  of  r : 

(t)  The  constant  functions: 

g(x)  = c for  some  defined  integer  c ; 

(fi)  The  split-constant  functions: 

, . r 0 if  x s j , . „ . 

g(x)  E ( c ^ j for  some  defined  integers  c and  j. 

Consider  now  the  ascending  chain  of  functions  , where 


/,<*)  s { 


0 if  x s i 
u otherwise. 


Each  fi  is  a postfixedpoint  of  r , which  descends  to  the  fixedpoint  0 of  r under  the  direct 
access  method  A . We  now  show  that  ft  is  the  unique  fixedpoint  of  r which  is  close  to  fl . 

Let  h be  a fixedpoint  of  r which  is  close  to  . By  definition,  h must  be  below  any 
fixedpoint  of  r which  is  above  /; . Two  such  fixedpoints  above  fi  are: 


g i(*)  * 0 


*?<*>  ■ { 


0 if 

1 if 


x i i 
x > i . 


The  only  fixedpoint  of  r which  is  below  both  g,  and  g2  is  ft  . since  no  other  nontotal 
function  can  be  a fixedpoint  of  r . On  the  other  hand,  one  can  easily  show  that  ft  itself  is  a 
fixedpoint  which  is  close  to  /j  . We  have  thus  shown  that  ft  is  the  unlqu t fixedpoint  of  r 

which  is  close  to  . Using  the  assumption  on  8 , we  can  now  deduce: 
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0[/j]  s 0 for  all  i . 

Let  us  consider  now  the  function  zero  b lim\fi } Since  zero  is  a fixedpoint  of  r , it  is  the 

unique  fixedpoint  of  r which  is  close  to  itself,  and  thus: 

0[/im{/^}]  e 0[zero]  = zero  . 

We  have  thus  shown  that  0 does  not  preserve  the  limit  of  convergent  sequences  (or  even  the 
lub  of  ascending  chains). 

Q.E.D. 


6.2  The  Insufficiency  of  a Single  Access  Method 

Theorem  10  showed  that  the  composition  A o C of  access  methods  has  the  interesting 
property  that  any  initial  function  converges  to  a fixedpoint  under  it.  A natural  question  is 
whether  there  exists  some  single  access  method  51  which  has  this  property,  i.e.,  whether  the 
fixedpoints  of  r can  be  reached  from  arbitrary  initial  functions  by  means  of  a single  limiting 
process. 

A plausible  candidate  for  such  an  access  method  is: 

F0sF 

F2i+lsT[F2i]  (for  all  t*0. 

F2f+2  E^6lF2f+liTCF2f+l3J 

In  this  method,  the  functions  with  odd  indices  are  defined  as  in  method  A , and  the  functions 
with  even  indices  are  defined  as  in  method  C . Unfortunately,  one  can  easily  show  that  certain 
initial  functions  / do  not  converge  under  this  "alternating  access  method." 

In  this  section  we  formally  prove  that  any  such  attempt  to  construct  a single  access  method,  in 
which  any  / converges  to  a fixedpoint,  must  fail.  It  suffices  to  consider  for  this  purpose  the 
simple  functional  f0[FXx)  : F(x+1)  over  the  natural  numbers.  What  we  actually  show  is  that 
for  any  "candidate"  access  method  2f  , one  can  construct  an  appropriate  initial  function  / such 
that  / does  not  converge  to  a fixedpoint  of  r0  under  W . 

Two  useful  properties  of  the  selected  functional  : F(x+1)  are 

(0  For  any  two  functions  : 
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r di^if  if zfi  5 £^(To(/ilToW}> 

(it)  For  any  two  consistent  functions  /|,/2  : 

r0Uub{f^2})  a lub{r0[f{\,r0[f2]) . 

Let  5 be  an  arbitrary  formula.  The  interpreted  formula  ft  0 is  a composition  of  f0,  gib  and 
lub,  and  f0  commutes  with  both  the  g!b  and  lub  operations.  We  can  thus  push  each  occurrence 

of  r0  in  ft,T°all  the  way  inwards,  and  obtain  a modified  formula  in  which  various  powers  of 
r0  are  combined  by  a structure  of  gib  and  lub  operations. 

Example  9:  Consider  the  formula  ft: 

T [MjF.T  [glb[¥,T  [F]}]}]. 

-,T„ 

For  the  special  case  of  the  functional  r0,  ft  can  be  transformed  in  the  following  way: 

T0[/u6{F,T0[g7i{F,T0[F]}]}]  - 
T0[/u6{F,g/£{f'0[F],T0<2>[F]}}] 

/^{rotFlroI^rotFlro*2^]}]}- 

/u*{r0CF].gf6{fo<2,CF].T0(3)[F]}}. 

In  this  modified  formula,  there  are  three  powers  of  r0  (r0,  r0<2>,  t0(3>);  these  powers  are 
connected  by  a structure  consisting  of  one  gib  and  one  lub  operation.  □ 

For  a formula  ftr#,  we  define  the  depth  of  ftT°,  d(ftT°).  to  be  the  greatest  power  of  r0  occurring 
in  the  modified  formula.  Since  iQk)[f]{x)  s f{x+k),  the  value  of  ftf°(/Xx)  Is  totally  determined 
by  the  values  of  fix')  for  x s x' s rf(ftT#).  We  shall  later  use  the  fact  that  any  change  in  the 
values  of  fix')  for  other  arguments  x'  cannot  affect  the  value  of  ftT°[/T(x). 
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We  can  now  prove  the  theorem: 


Thaoram  14:  Let  r0  be  the  following  functional  over  the  natural  numbers: 

TolFXx):  F(x+1). 

Then  there  is  no  single  access  method  SI  under  which  any  initial 
function  / converges  to  a fixedpoint  of 

Proof:  We  first  give  an  informal  overview  of  the  proof.  Suppose  that  the  theorem  is  not  true, 
and  access  method  V - {$,•},  has  the  desired  property.  We  derive  a contradiction  by 
constructing  an  initial  function  / in  such  a way  that  for  some  ascending  sequence  i0  < ij  < ...  of 
indices, 


* ‘S  eVen 

‘.W°>  * (o  imsodd. 

The  sequence  of  functions  {5jT°[/]}  thus  cannot  converge,  since  it  changes  value  infinitely 
many  times  at  x a 0. 

The  function  / is  defined  as  the  lim  of  some  convergent  sequence  of  functions  {gf}.  This 
sequence  satisfies,  for  each  k: 


- { 


u 

0 


if  k is  even 
if  k is  odd  . 


For  any  fixed  function  gk,  the  other  functions  gk.  for  k'  > k,  are  constructed  in  such  a way  that 

gk(x)  and  gk-(x)  are  identical  for  all  0 s x s rf(S*°).  Consequently,  the  limit  / of  {gt}  also 
satisfies: 


J{x)  m gk(x)  for  all  0 i x s . 

Since  the  value  of  0^gkXO)  depends  only  on  the  value  of  gk  for  the  first  d(0r^°) 
arguments,  we  obtain: 
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8pJVKo)»®Jwo)- 

This  equality  establishes  the  oscillating  nature  of  the  sequence  of  values  {ff^T/XO)},  which  is 
the  desired  result. 

We  now  formally  define  the  convergent  sequence  of  functions  {g(}  and  the  ascending  sequence 
of  indices  {<,}. 

As  first  elements  in  these  sequences,  we  take  g0  a ft  and  i0  a 0.  We  justify  this  selection  by 

noting  that  t$Q°[flX0)  a « , since  ft  is  a fixedpoint  of  r and  thus  for  any  formula  5,  5JT°[ft] 
aft 


We  now  proceed  to  define  g,  and  f|.  As  discussed  above,  we  want  g,(x)  to  be  identical  to  g0(x) 
for  any  0 s x s We  thus  define: 


f|(*)  * { 


g0(x)  if  0 S X < 


otherwise  . 


By  assumption,  any  initial  function  converges  under  51  to  a fixedpoint  of  r0,  and  thus  g, 
converges  under  W to  some  fixedpoint  h of  r.  Since  gi  converges  to  the  same  fixedpoint  zero 
under  the  two  extreme  compositions  C'  o C and  C o C',  the  function  h must  be  zero.  By 
definition  of  convergence,  there  is  some  index  i,  such  that 

8fag,X0)  ■ 0 , 

and  we  have  thus  found  the  second  function  g,  and  second  index  i|. 

We  now  briefly  outline  the  next  stage  in  the  construction  of  {gj}  and  (i.e.,  g2  and  i2).  Let  m2 
be  defined  as: 

m2  ■ maxi  2 , <f(S,*9) , ) • 


The  function  g2  is  defined  as. 


r 
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« 


if  0 i x s m2 
otherwise  . 


This  function  converges  to  Q under  both  compositions  C'oC  and  C o C',  and  thus  g2 
converges  to  0 under  (I  as  well.  This  convergence  implies  the  existence  of  an  index  i2  > lx 
such  that 


®<2° (ft)  * « • 

The  other  functions  g * in  the  sequence  are  constructed  by  taking  an  appropriate  initial  segment 
of  and  changing  the  value  of  the  constant  tail  from  0 to  u or  from  w to  0 (according  to 
the  oddity  of  k).  The  boundary  of  the  initial  segment,  m*.  is  defined  in  such  a way  that  i 
k,  and  thus  the  sequence  [gj]  of  functions  is  assured  to  converge  at  any  argument  x (since  g^{x) 
is  constant  for  all  k 2 x).  The  function  / ■ lim{gj]  is  thus  defined,  and  by  its  definition,  it 
satisfies: 


if  x is  even 
if  x is  odd  . 


QE.D. 
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This  paper  covers  oniy  the  lattice-theoretical  aspects  of  access  methods.  Other  problems  which 
might  be  of  interest  include  the  computability  aspects  of  access  methods,  the  relations  between 
access  methods  and  substitution/simplification  techniques  for  evaluating  fixedpoints,  and 
characterizations  of  those  cases  in  which  a single  access  method  is  sufficient  in  order  to  access 
fixedpoints. 
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